Your privacy, kept simple

We built this app to be a calm, low-friction utility — and we treat your data the same way: we collect as little as possible.

1. What we collect

• Email address — only if you create an account to upgrade. We use passwordless email-code sign-in, so we do not store passwords.
• Subscription / purchase status — whether your account is Free or Premium.
• Payment information — processed entirely by our payment provider, Stripe. We never see or store your full card details.
• Basic technical data — standard server logs (e.g. browser type, approximate region) needed to deliver the service securely.

We do not collect data about your baby, and we do not require any information about children to use the app.

2. How we use it

• To sign you in and remember whether you have Premium access.
• To process upgrades and provide customer support.
• To keep the service secure and working.

We do not sell your personal data. We do not show third-party advertising.

3. Service providers we rely on

• Supabase — authentication, database, and secure audio storage (EU region).
• Vercel — hosting and content delivery.
• Stripe — payment processing.
• Resend — sending sign-in code emails.
• ImprovMX — forwarding email sent to our support address.

Each processes data only to provide their part of the service, under a data processing agreement. Some of these providers are based outside the EU; where that is the case, transfers are covered by the European Commission's Standard Contractual Clauses.

4. Cookies & local storage

As a Progressive Web App, we store data locally on your device (e.g. your login session and cached audio) so the app works offline and remembers you. We do not use tracking or advertising cookies.

5. Why we are allowed to use it (legal bases)

• Performance of a contract — your email address and purchase status, so we can sign you in and give you the Premium access you paid for.
• Legal obligation — retaining invoice and transaction records as required by Italian tax law.
• Legitimate interests — keeping the service secure and working, and understanding aggregate usage. We use privacy-friendly, cookieless analytics that do not track you across sites or build a profile of you.

6. Your rights

Under the GDPR you have the right to access your personal data, correct it, delete it, restrict or object to its processing, and receive a copy in a portable format. Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these, email hello@calmyourbaby.app and we will respond within one month, as the GDPR requires.

If you believe we have handled your data improperly, you have the right to lodge a complaint with a supervisory authority — in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it) — or with the authority in your own country of residence.

If you are a California resident, you may also have rights under the CCPA to know what personal information we collect and to request its deletion. We do not sell personal information.

7. Data retention

We keep your account data for as long as your account is active. If you ask us to delete your account, we remove your personal data, except transaction records that Italian tax law requires us to keep for 10 years.

8. Children's privacy

CalmYourBaby is intended for use by parents and adults. It is not directed to children, and we do not knowingly collect personal information from children. Although the app is used around babies, it collects no information about them.

9. Changes

We may update this policy. Material changes will be reflected by the "Last updated" date above.

10. Contact

Questions about your privacy? Email hello@calmyourbaby.app.